Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80FBED009D5F11F1B06DD618CF1D38B0.roa
File:                     80FBED009D5F11F1B06DD618CF1D38B0.roa (raw, json)
Hash identifier:          WSSlIxiZeDnZmFybpEz/Iz52a39SdbFF7uX7dnLT0X8=
Subject key identifier:   3B:F8:76:A9:6E:CC:D0:4B:3E:8A:5A:CA:1F:2B:5E:EF:1E:16:5E:34
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80FBED009D5F11F1B06DD618CF1D38B0.roa
Signing time:             Fri 21 Aug 2026 12:54:54 +0000
ROA not before:           Fri 21 Aug 2026 12:54:50 +0000
ROA not after:            Tue 29 Sep 2026 12:54:50 +0000
asID:                     44559
IP address blocks:        156.246.248.0/24 maxlen: 24
                          156.246.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118754 (0x1cfe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 12:54:50 2026 GMT
            Not After : Sep 29 12:54:50 2026 GMT
        Subject: CN=6a884a9e-f65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:61:28:e8:37:d6:5c:20:02:f3:b2:b3:12:
                    e3:d7:8e:b2:36:90:46:72:6e:99:65:d6:21:6d:77:
                    17:0b:92:32:e6:ee:7a:56:46:33:04:ea:7c:69:55:
                    2b:b8:b2:34:08:2c:c9:9f:bc:23:bb:66:5e:cc:60:
                    62:42:12:7c:03:64:2a:fb:50:d7:12:e5:3a:7e:ac:
                    03:3a:e5:50:15:0a:11:4d:a4:2d:a8:2c:01:ca:e4:
                    df:5f:53:82:68:c9:60:49:6d:36:5f:99:61:0a:01:
                    47:b0:31:27:90:86:1d:9c:1e:d8:70:ca:8d:67:3f:
                    e7:1f:99:c2:dd:66:19:d6:68:d3:a9:a4:45:66:20:
                    c5:e7:41:ff:f9:26:53:a1:26:09:e1:d9:17:aa:5e:
                    c9:cf:2c:99:90:44:31:6c:7c:5a:04:2a:8f:5d:db:
                    b8:6a:71:d6:c9:94:f3:f7:e2:28:8e:f1:0f:2a:b5:
                    a9:81:a9:66:84:16:c7:d2:19:62:f5:bf:99:9c:cf:
                    b5:d4:9c:ec:af:58:98:a0:6f:d1:b6:59:64:d0:90:
                    b8:81:22:8d:98:87:c9:95:73:f6:36:11:c8:f1:6c:
                    bf:3a:bc:37:0e:0c:a2:43:af:7d:f6:f5:75:8e:d1:
                    2d:25:92:e8:f0:a0:20:f0:7e:b0:db:01:b8:82:90:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F8:76:A9:6E:CC:D0:4B:3E:8A:5A:CA:1F:2B:5E:EF:1E:16:5E:34
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80FBED009D5F11F1B06DD618CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:45:20:59:7e:bc:a9:b4:63:97:56:a8:b7:9a:bb:f1:ed:94:
         45:c9:97:fd:d9:f1:1e:0a:ed:84:a1:a9:03:87:75:bb:76:0e:
         1e:f6:9c:36:80:73:dd:4c:1a:6a:38:7e:29:49:56:63:d4:cd:
         b6:a8:3d:b4:de:a5:69:ae:a5:f7:09:24:4f:50:4e:b5:42:63:
         cd:d2:d0:72:60:70:66:59:b9:d1:e4:5c:b4:cc:89:97:20:cc:
         2a:2f:45:e8:27:73:5e:48:79:d7:eb:ac:fe:a5:fb:5d:1f:26:
         ee:c8:35:05:b3:66:0c:d6:95:40:86:e6:53:9d:ff:48:ee:3f:
         c8:4b:4f:d6:46:99:62:20:0e:3e:25:8d:9b:47:c3:3c:96:c2:
         12:d6:7b:45:bb:bc:1c:36:1a:13:08:07:30:16:5c:e2:15:be:
         11:44:03:c8:3b:73:cf:c6:02:97:17:c6:53:d7:91:e1:ed:1f:
         42:d0:17:43:67:f4:cb:df:8f:9e:6e:2a:60:e7:4f:cb:77:23:
         aa:22:ae:eb:74:b8:4b:be:98:2b:51:0b:a5:fa:ee:1f:4b:33:
         91:fe:f1:ff:e1:88:84:21:39:f3:03:b3:47:4a:4c:19:93:d2:
         0c:b8:cb:d6:d9:a8:f8:32:62:8f:1e:3e:f9:58:6e:be:89:e2:
         d0:38:5b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----